Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa
File:                     PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa (raw, json)
Hash identifier:          xCABqx02nxLtGIHGZEkpKQC2sCkk6C9g1r6xD1Lc9H0=
Subject key identifier:   3C:F8:FC:AF:15:7F:63:89:7A:A0:8B:80:E2:C6:B0:CB:93:93:43:9A
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       99
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa
Signing time:             Tue 31 Mar 2026 07:35:20 +0000
ROA not before:           Tue 31 Mar 2026 07:35:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        153.126.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3CF8FCAF157F63897AA08B80E2C6B0CB9393439A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:39:9f:46:39:bd:ac:e8:76:1b:9a:be:8a:
                    a6:04:e5:de:3a:59:a7:c7:57:bf:84:7e:9e:c5:22:
                    a0:ea:9f:09:d9:01:90:27:12:60:00:e6:77:07:f3:
                    b0:a0:9c:53:2d:c7:f1:9a:cb:60:c6:46:7d:15:0a:
                    26:60:7d:83:f5:26:04:58:b1:bc:b5:a4:b5:ef:cd:
                    fe:a5:80:14:13:8a:df:75:f5:b0:f9:66:74:8b:ca:
                    1b:e7:ab:c7:35:fe:84:87:07:0c:4f:6b:58:34:03:
                    25:0c:dd:57:d1:a3:47:07:81:30:8f:7f:51:29:94:
                    5a:8e:2c:4d:d9:bf:7a:22:40:62:04:e0:68:18:4c:
                    96:d1:05:94:37:d4:58:c6:b4:91:d6:c0:db:20:e5:
                    14:77:5e:0b:aa:1c:39:88:f3:ad:c4:6c:46:d4:fe:
                    36:69:ec:74:f5:9f:6e:9d:57:91:33:62:dc:9c:a9:
                    5a:7f:b6:85:4a:07:b3:12:92:4e:5f:bb:4c:3d:fb:
                    ff:eb:ff:d4:8b:10:b1:17:e3:28:51:7b:61:a4:d7:
                    54:d4:83:a6:ee:21:74:0a:f3:b6:d6:45:45:61:51:
                    8e:48:8a:30:73:95:3a:c6:db:27:85:a1:d2:31:2a:
                    f5:31:5b:08:ef:91:c3:ca:f5:85:1e:e6:ea:f0:14:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F8:FC:AF:15:7F:63:89:7A:A0:8B:80:E2:C6:B0:CB:93:93:43:9A
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:8a:c2:c4:90:49:fd:28:fe:80:0c:19:88:2a:aa:3e:e1:
         c4:d9:3e:00:9e:d5:80:a0:fe:42:1b:a8:94:3c:04:b2:10:33:
         4e:d2:cd:4a:c0:a9:6b:ce:80:f3:42:cf:71:f4:da:57:48:74:
         98:fe:2a:1e:98:c6:bd:d5:d0:64:b8:a4:1f:b1:29:4c:28:e6:
         73:9e:1f:9f:fc:b7:59:1e:83:46:0b:1e:16:23:25:4c:11:d5:
         2f:c5:f2:c1:82:07:61:7c:b0:8a:18:6c:dd:d9:5f:68:d3:c4:
         5e:74:c5:83:1a:ec:53:66:81:3e:1a:ad:0b:60:62:58:8c:85:
         31:26:76:14:39:41:68:b2:61:70:fd:df:1e:c2:48:29:39:37:
         3a:9c:8f:62:0e:bc:c6:25:fd:d6:c7:89:70:c0:53:e7:33:c6:
         12:c0:f9:7f:26:03:70:16:e3:47:50:fb:41:2f:42:f1:33:db:
         4e:3d:f3:72:3f:9c:33:80:7a:22:69:f3:42:a5:0e:2d:d9:a3:
         d6:3d:1a:85:b0:b8:ac:86:46:93:44:39:32:3f:ff:19:51:10:
         32:0d:4e:13:20:f8:ea:c2:95:4d:46:aa:24:35:b3:7b:49:17:
         39:dc:18:e8:a4:0a:aa:4a:20:98:a0:5f:f0:ed:0a:37:ac:e8:
         d0:db:b5:69
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
MTU2NDlBODI1N0Y2NEZDOTQyMTY3RTMxMEFEMzhBRDAyQ0RCQzAeFw0yNjAzMzEw
NzM1MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNDRjhGQ0FGMTU3RjYz
ODk3QUEwOEI4MEUyQzZCMENCOTM5MzQzOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMITmfRjm9rOh2G5q+iqYE5d46WafHV7+Efp7FIqDqnwnZAZAn
EmAA5ncH87CgnFMtx/Gay2DGRn0VCiZgfYP1JgRYsby1pLXvzf6lgBQTit919bD5
ZnSLyhvnq8c1/oSHBwxPa1g0AyUM3VfRo0cHgTCPf1EplFqOLE3Zv3oiQGIE4GgY
TJbRBZQ31FjGtJHWwNsg5RR3XguqHDmI863EbEbU/jZp7HT1n26dV5EzYtycqVp/
toVKB7MSkk5fu0w9+//r/9SLELEX4yhRe2Gk11TUg6buIXQK87bWRUVhUY5IijBz
lTrG2yeFodIxKvUxWwjvkcPK9YUe5urwFJ3zAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUPPj8rxV/Y4l6oIuA4sawy5OTQ5owHwYDVR0jBBgwFoAU78FWSaglf2T8lCFn
4xCtOK0CzbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzExMjQ3Lzc4RldTYWdsZjJUOGxDRm40eEN0T0swQ3pidy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzc4RldTYWdsZjJUOGxDRm40eEN0
T0swQ3pidy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMTI0Ny9QUGo4cnhWX1k0bDZvSXVBNHNhd3k1T1RRNW8ucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmX6AMA0GCSqGSIb3DQEBCwUA
A4IBAQCmPIrCxJBJ/Sj+gAwZiCqqPuHE2T4AntWAoP5CG6iUPASyEDNO0s1KwKlr
zoDzQs9x9NpXSHSY/ioemMa91dBkuKQfsSlMKOZznh+f/LdZHoNGCx4WIyVMEdUv
xfLBggdhfLCKGGzd2V9o08RedMWDGuxTZoE+Gq0LYGJYjIUxJnYUOUFosmFw/d8e
wkgpOTc6nI9iDrzGJf3Wx4lwwFPnM8YSwPl/JgNwFuNHUPtBL0LxM9tOPfNyP5wz
gHoiafNCpQ4t2aPWPRqFsLishkaTRDkyP/8ZURAyDU4TIPjqwpVNRqokNbN7SRc5
3BjopAqqSiCYoF/w7Qo3rOjQ27Vp
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:29 2026 by rpki-client